CVE-2023-33252

Published
View on NVD ↗
CVSS v3
7.5
HIGH
CVSS v2
N/A
Affected
1
PROJECT

Description

iden3 snarkjs through 0.6.11 allows double spending because there is no validation that the publicSignals length is less than the field modulus.

iden3/snarkjs
iden3/snarkjs
zkSNARK implementation in JavaScript & WASM
GitHubGitHub
2.03K